Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a786f78-2236-3af7-9c8a-389f99fa274f.roa
File:                     2a786f78-2236-3af7-9c8a-389f99fa274f.roa (raw, json)
Hash identifier:          tir/rmtAk38ejSmbqrHExtht10rTWKtROMIsri1ez/c=
Subject key identifier:   57:C6:7E:1A:EB:C4:CC:E8:5F:EF:01:95:77:71:7A:10:CC:88:39:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1654FE7D0CFC38C8C99A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a786f78-2236-3af7-9c8a-389f99fa274f.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     19579
IP address blocks:        50.223.214.160/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4f:e7:d0:cf:c3:8c:8c:99:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3f2f4265-0cef-4146-929a-1ea28d7bb201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:50:50:29:f6:a0:78:8e:0f:1b:cd:eb:d0:
                    db:e4:cc:46:8b:80:5a:1d:00:56:ee:2b:d7:3e:da:
                    c3:d8:44:bc:61:a6:34:bc:bc:d8:e5:eb:a5:9d:26:
                    30:75:2a:6f:9e:d6:22:04:9d:b7:0b:ce:6f:d6:44:
                    e4:1a:63:ee:4e:4c:ec:cd:ae:92:f4:16:94:08:d0:
                    b1:75:cb:a6:9a:30:a2:df:86:f7:b9:d3:ac:2e:c7:
                    29:76:f4:bf:e1:58:c1:af:ce:37:c2:e2:7d:81:f8:
                    e2:c2:ec:8d:3e:da:3b:74:f6:48:22:c5:d1:06:c5:
                    ee:be:7c:00:ce:cd:91:cf:ef:7a:33:c3:ff:46:dc:
                    56:8d:1f:fe:3e:c7:a5:fc:a3:55:39:c9:d2:9a:fa:
                    93:41:d7:39:c5:45:74:9f:bb:b6:b0:c0:d1:bb:83:
                    ef:24:e1:e2:bf:6c:80:b1:71:04:0b:ab:ad:d6:0d:
                    7a:d6:b8:68:33:12:b0:0d:2a:28:b0:34:42:e6:99:
                    94:66:7d:79:b0:f9:19:2b:64:26:46:7f:45:6d:c1:
                    60:dd:c2:a5:37:9a:3a:04:f9:05:67:1a:9e:40:ac:
                    01:57:21:9b:9c:08:a9:28:3a:47:4d:a8:41:d3:69:
                    06:e8:bf:97:8a:c0:46:01:e9:cc:89:36:dd:63:5b:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:7E:1A:EB:C4:CC:E8:5F:EF:01:95:77:71:7A:10:CC:88:39:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a786f78-2236-3af7-9c8a-389f99fa274f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.223.214.160/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:6b:f9:75:99:83:d3:8b:c8:7c:a9:0b:e3:aa:6f:fd:65:
         b2:0d:28:91:63:23:dc:0a:5b:c7:ee:e1:f7:2b:e8:48:bb:bd:
         7d:04:b1:cc:19:a0:00:ef:73:61:5b:10:18:ba:c7:9f:51:1f:
         c8:f4:9f:d6:95:26:3a:89:d8:2d:76:d2:e7:5b:41:31:e6:fc:
         32:33:e3:c5:5e:d1:12:56:02:e2:4e:d8:16:2b:a8:36:a8:6c:
         a4:54:72:e7:17:02:bd:15:65:97:1b:98:21:42:54:2d:cf:db:
         81:a6:af:c2:58:f5:f5:10:57:cd:17:be:88:9b:4d:a3:cb:8b:
         ae:f0:76:dc:b4:f2:c8:25:3c:f0:71:03:c0:03:d8:a1:a0:dd:
         ae:0e:c4:cb:b0:f8:1a:83:5d:2a:48:ac:04:c9:ab:15:0e:5e:
         2a:60:4f:8c:51:1c:1a:c9:92:38:25:5b:78:fd:fd:65:0e:f2:
         ac:c7:7e:d7:2f:05:e9:49:04:a1:4d:a6:99:ec:3d:fa:35:7b:
         eb:16:1c:91:6d:ab:bc:1b:37:f3:e8:b4:96:6a:ae:f2:14:c0:
         b4:db:e7:ef:e8:31:5f:8b:0e:61:4a:4f:3b:0c:78:66:63:20:
         aa:52:18:2e:75:71:b9:6d:97:c1:a5:23:db:06:bb:38:59:36:
         5f:1a:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:41:12 2025 by rpki-client